Login Request a demo
WE
Vendor
Westerndigital
108 products with CVEs on record
339
CVEs
0
On KEV
0
New 30D
Products
MC
MY Cloud OS
Westerndigital
9.8
18 CVEs0 on KEV0 new
MC
MY Cloud Home Firmware
Westerndigital
9.8
14 CVEs0 on KEV0 new
MC
MY Cloud Home Duo Firmware
Westerndigital
9.8
13 CVEs0 on KEV0 new
MC
MY Cloud Firmware
Westerndigital
9.8
12 CVEs0 on KEV0 new
MC
MY Cloud Pr4100 Firmware
Westerndigital
9.8
11 CVEs0 on KEV0 new
SI
Sandisk Ibi Firmware
Westerndigital
9.8
11 CVEs0 on KEV0 new
MC
MY Cloud Dl2100 Firmware
Westerndigital
9.8
10 CVEs0 on KEV0 new
MC
MY Cloud Dl4100 Firmware
Westerndigital
9.8
10 CVEs0 on KEV0 new
MC
MY Cloud Ex2 Ultra Firmware
Westerndigital
9.8
10 CVEs0 on KEV0 new
MC
MY Cloud Ex2100 Firmware
Westerndigital
9.8
10 CVEs0 on KEV0 new
MC
MY Cloud Ex4100 Firmware
Westerndigital
9.8
10 CVEs0 on KEV0 new
MC
MY Cloud Pr2100 Firmware
Westerndigital
9.8
9 CVEs0 on KEV0 new
MC
MY Cloud OS 5
Westerndigital
9.8
8 CVEs0 on KEV0 new
MC
MY Cloud Mirror G2 Firmware
Westerndigital
9.8
7 CVEs0 on KEV0 new
SB
Sweet B
Westerndigital
5.3
4 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sb8w-128g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sb8w-1t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sb8w-256g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sb8w-2t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sb8w-512g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sn8w-128g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sn8w-1t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sn8w-256g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sn8w-2t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9sn8w-512g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tb8w-128g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tb8w-1t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tb8w-256g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tb8w-2t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tb8w-512g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tn8w-128g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tn8w-1t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tn8w-256g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tn8w-2t00 Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
SX
Sandisk X600 Sd9tn8w-512g Firmware
Westerndigital
7.5
3 CVEs0 on KEV0 new
WC
WD Cloud Firmware
Westerndigital
9.8
3 CVEs0 on KEV0 new
WD
WD Discovery
Westerndigital
8.8
3 CVEs0 on KEV0 new
ED
Edgerover
Westerndigital
9.1
2 CVEs0 on KEV0 new
MC
MY Cloud
Westerndigital
4.6
2 CVEs0 on KEV0 new
MC
MY Cloud Glacier Firmware
Westerndigital
5.5
2 CVEs0 on KEV0 new
MC
MY Cloud Home
Westerndigital
4.7
2 CVEs0 on KEV0 new
MC
MY Cloud Mirror Gen2 Firmware
Westerndigital
9.8
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sb6s-128g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sb6s-256g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sb7s-010t Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sb7s-512g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sf6s-128g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sf6s-256g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sf6s-512g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sn6s-128g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sn6s-256g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300 Sd7sn6s-512g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7sb3q-064g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7sn3q-064g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7ub2q-010t Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7ub2q-512g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7ub3q-128g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7ub3q-256g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7un3q-128g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
SX
Sandisk X300s Sd7un3q-256g Firmware
Westerndigital
6.3
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-22819
MC
MY Cloud Ex2100 Firmware
Westerndigital
4.9
1%
Feb 5An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the…
CVE-2023-22817
MC
MY Cloud Ex2 Ultra Firmware
Westerndigital
5.5
0%
Feb 5Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback…
CVE-2023-22818
SS
Sandisk Security Installer
Westerndigital
7.8
0%
Nov 15Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary…
CVE-2023-22814
MC
MY Cloud OS
Westerndigital
9.8
1%
Jul 1An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack
CVE-2023-22816
MC
MY Cloud OS
Westerndigital
8.8
1%
Jun 30A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and…
CVE-2023-22815
MC
MY Cloud OS
Westerndigital
6.7
1%
Jun 30Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on…
CVE-2022-36331
MC
MY Cloud Ex4100 Firmware
Westerndigital
7.5
1%
Jun 12Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain…
CVE-2022-36328
MC
MY Cloud Home Firmware
Westerndigital
4.9
1%
May 18Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and…
CVE-2022-36327
MC
MY Cloud Home Duo Firmware
Westerndigital
9.8
1%
May 18Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to locations with certain critical…
CVE-2022-36326
SI
Sandisk Ibi Firmware
Westerndigital
4.9
1%
May 18An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the…
CVE-2022-29840
MC
MY Cloud OS
Westerndigital
5.5
0%
May 10Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in…
CVE-2022-29841
MC
MY Cloud OS
Westerndigital
9.8
1%
May 10Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that was caused by a command that read files from a privileged location…
CVE-2022-29842
MC
MY Cloud OS
Westerndigital
9.8
2%
May 10Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could allow an attacker to execute code in the context of the root user on a…
CVE-2022-36329
MC
MY Cloud Home Duo Firmware
Westerndigital
7.5
0%
May 10An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in Western Digital My Cloud Home, My Cloud…
CVE-2022-36330
MC
MY Cloud Home Firmware
Westerndigital
8.1
1%
May 10A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My…
CVE-2023-22813
SI
Sandisk Ibi
Westerndigital
4.3
0%
May 8A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and…
CVE-2023-22812
SP
Sandisk Privateaccess
Westerndigital
7.4
0%
Mar 24SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising…
CVE-2021-36226
MC
MY Cloud OS
Westerndigital
9.8
1%
Feb 6Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files
CVE-2021-36225
MC
MY Cloud OS
Westerndigital
8.8
1%
Feb 6Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation
CVE-2021-36224
MC
MY Cloud OS
Westerndigital
9.8
1%
Feb 6Western Digital My Cloud devices before OS5 have a nobody account with a blank password
CVE-2022-29844
MC
MY Cloud Ex4100 Firmware
Westerndigital
9.8
36%
Jan 26A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files
CVE-2022-29843
MC
MY Cloud Ex4100 Firmware
Westerndigital
9.8
1%
Jan 26A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to…
CVE-2022-29839
MC
MY Cloud OS
Westerndigital
5.5
0%
Dec 9Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a…
CVE-2022-29838
MC
MY Cloud OS
Westerndigital
4.6
0%
Dec 9Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information…
CVE-2022-29837
SI
Sandisk Ibi Firmware
Westerndigital
7.8
0%
Dec 1A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom…
CVE-2022-29836
MC
MY Cloud Home Duo Firmware
Westerndigital
4.3
0%
Nov 9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; My Cloud Home Duo;…
CVE-2022-23006
MC
MY Cloud Home Duo Firmware
Westerndigital
6.7
0%
Sep 27A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system…
CVE-2022-29835
WD
WD Discovery
Westerndigital
5.3
0%
Sep 19WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm
CVE-2022-23004
SB
Sweet B
Westerndigital
5.3
1%
Jul 29When computing a shared secret or point multiplication on the NIST P-256 curve using a public key with an X coordinate of zero, an error is returned from the library, and an…
CVE-2022-23003
SB
Sweet B
Westerndigital
5.3
1%
Jul 29When computing a shared secret or point multiplication on the NIST P-256 curve that results in an X coordinate of zero, the resulting output is not properly reduced modulo the…
CVE-2022-23002
SB
Sweet B
Westerndigital
5.3
1%
Jul 29When compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime…
CVE-2022-23001
SB
Sweet B
Westerndigital
5.3
1%
Jul 29When compressing or decompressing elliptic curve points using the Sweet B library, an incorrect choice of sign bit is used
CVE-2022-23000
MC
MY Cloud Mirror G2 Firmware
Westerndigital
7.8
0%
Jul 25The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules
CVE-2022-22999
MC
MY Cloud Dl4100 Firmware
Westerndigital
4.8
0%
Jul 25Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up…
CVE-2022-22998
MC
MY Cloud Home Firmware
Westerndigital
7.5
1%
Jul 12Implemented protections on AWS credentials that were not properly protected
CVE-2022-22997
MC
MY Cloud Home Duo Firmware
Westerndigital
9.8
2%
Jul 12Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute…
CVE-2022-22996
SP
Sandisk Professional G-raid 4/8 Software Utility
Westerndigital
7.8
0%
Mar 30The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability
CVE-2022-22995
MC
MY Cloud Ex2100 Firmware
Westerndigital
9.8
3%
Mar 25The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files
CVE-2022-22994
MC
MY Cloud OS
Westerndigital
9.8
2%
Jan 28A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an unsecured HTTP call
CVE-2022-22993
MC
MY Cloud OS
Westerndigital
8.8
1%
Jan 28A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing…
CVE-2022-22992
MC
MY Cloud OS
Westerndigital
9.8
2%
Jan 28A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the…
CVE-2022-22991
MC
MY Cloud OS
Westerndigital
8.8
1%
Jan 13A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call
CVE-2022-22990
MC
MY Cloud OS
Westerndigital
8.8
2%
Jan 13A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices
CVE-2022-22989
MC
MY Cloud OS
Westerndigital
9.8
1%
Jan 13My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network
CVE-2022-22988
ED
Edgerover
Westerndigital
9.1
1%
Jan 13File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources
CVE-2021-35941
WM
WD MY Book Live Duo Firmware
Westerndigital
7.5
13%
Jun 29Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication,…
CVE-2021-33205
ED
Edgerover
Westerndigital
8.8
1%
Jun 11Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher…
CVE-2021-28653
AR
Armorlock
Westerndigital
6.5
1%
Mar 19The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely
CVE-2021-3310
MC
MY Cloud OS
Westerndigital
7.8
1%
Mar 10Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares
CVE-2020-29654
DA
Dashboard
Westerndigital
7.8
0%
Dec 12Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account
CVE-2020-29563
MC
MY Cloud OS 5
Westerndigital
9.8
3%
Dec 12An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118
CVE-2020-28971
MC
MY Cloud OS 5
Westerndigital
9.8
4%
Dec 1An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115
CVE-2020-28970
MC
MY Cloud OS 5
Westerndigital
9.8
4%
Dec 1An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115
CVE-2020-28940
MC
MY Cloud OS 5
Westerndigital
9.8
4%
Dec 1On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerability that could allow an unauthenticated user to execute…
CVE-2020-13799
IC
Inand CL Em132 Firmware
Westerndigital
6.8
0%
Nov 18Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces,…
CVE-2020-27744
MC
MY Cloud Firmware
Westerndigital
9.8
6%
Oct 29An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114
CVE-2020-27160
MC
MY Cloud Firmware
Westerndigital
9.8
5%
Oct 27Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 (issue 3 of 3)
CVE-2020-27159
MC
MY Cloud Firmware
Westerndigital
9.8
6%
Oct 27Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices…
CVE-2020-27158
MC
MY Cloud Firmware
Westerndigital
9.8
7%
Oct 27Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114
CVE-2020-25765
MC
MY Cloud Firmware
Westerndigital
9.8
6%
Oct 27Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1140